From f4ff2a7eee688148133ddc9d6c2f205d7c4f48f6 Mon Sep 17 00:00:00 2001 From: tm Date: Sat, 27 Nov 2021 21:53:13 +0000 Subject: Pullup ticket #6545 - requested by taca lang/ruby26-base: security fix Revisions pulled up: - lang/ruby/rubyversion.mk 1.238 - lang/ruby26-base/distinfo 1.15 --- Module Name: pkgsrc Committed By: taca Date: Thu Nov 25 15:51:08 UTC 2021 Modified Files: pkgsrc/lang/ruby: rubyversion.mk pkgsrc/lang/ruby26-base: distinfo Log Message: lang/ruby26-base: update to 2.6.9 Ruby 2.6.9 Released Posted by usa on 24 Nov 2021 Ruby 2.6.9 has been released. This release includes security fixes. Please check the topics below for details. * CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods * CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse See the commit logs for details. Ruby 2.6 is now under the state of the security maintenance phase, until the end of March of 2022. After that date, maintenance of Ruby 2.6 will be ended. We recommend you start planning the migration to newer versions of Ruby, such as 3.0 or 2.7. --- lang/ruby/rubyversion.mk | 6 +++--- lang/ruby26-base/distinfo | 10 +++++----- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/lang/ruby/rubyversion.mk b/lang/ruby/rubyversion.mk index ed36b3b7f31..bdd80062f62 100644 --- a/lang/ruby/rubyversion.mk +++ b/lang/ruby/rubyversion.mk @@ -1,4 +1,4 @@ -# $NetBSD: rubyversion.mk,v 1.237 2021/09/25 00:47:26 dholland Exp $ +# $NetBSD: rubyversion.mk,v 1.237.2.1 2021/11/27 21:53:13 tm Exp $ # # This file determines which Ruby version is used as a dependency for @@ -213,7 +213,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/ruby([0-9][0-9])-.*/\1/} .endif # current supported Ruby's version -RUBY26_VERSION= 2.6.8 +RUBY26_VERSION= 2.6.9 RUBY27_VERSION= 2.7.4 RUBY30_VERSION= 3.0.2 @@ -286,7 +286,7 @@ RUBY_BIGDECIMAL_VERSION= 1.4.1 RUBY_BUNDLER_VERSION= 1.17.2 RUBY_CMATH_VERSION= 1.0.0 RUBY_CSV_VERSION= 3.0.9 -RUBY_DATE_VERSION= 2.0.0 +RUBY_DATE_VERSION= 2.0.2 RUBY_DBM_VERSION= 1.0.0 RUBY_E2MMAP_VERSION= 0.1.0 RUBY_ETC_VERSION= 1.0.1 diff --git a/lang/ruby26-base/distinfo b/lang/ruby26-base/distinfo index bb6d89f5bfe..7d01a96a1f7 100644 --- a/lang/ruby26-base/distinfo +++ b/lang/ruby26-base/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.11 2021/07/07 15:15:19 taca Exp $ +$NetBSD: distinfo,v 1.11.2.1 2021/11/27 21:53:13 tm Exp $ -SHA1 (ruby-2.6.8.tar.xz) = fa5ad518ef31bbf5c3386dbcec7b57196a1e618e -RMD160 (ruby-2.6.8.tar.xz) = d2604765e5d360efa21f55e6eca90a6e026a52c1 -SHA512 (ruby-2.6.8.tar.xz) = d040ad2238523587d8f356fcb796b8b6ad7f8caff7dd6df09e3f7efcbfa0369e33600e78c7f2bc713ae77c040757cce5c4fec223cb9070209f2bf741899c556d -Size (ruby-2.6.8.tar.xz) = 11599488 bytes +SHA1 (ruby-2.6.9.tar.xz) = fc67ca162010aac4af49d73a8c48be5cb2fb5907 +RMD160 (ruby-2.6.9.tar.xz) = 0686248d52eacbebe0c54cc8b7d15cf9bc6fee32 +SHA512 (ruby-2.6.9.tar.xz) = f60aa89e685cea324185eb0d13e6b44caef4e4f761cbf9ea1386ae70e39faf3866ac01e4bb5354574f2583e74290b8c80eaf63d126040d52368be6c771476451 +Size (ruby-2.6.9.tar.xz) = 11590064 bytes SHA1 (patch-configure) = ccfad7b5e35e87308e187e6c5fb3ffea57ad763d SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b SHA1 (patch-lib_mkmf.rb) = 75d2261a8282a00cd5f811a5e629302d1667207e -- cgit v1.2.3